{"as_of":"2026-08-21T13:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:83ef7901121efd9f902363ae446c7fcf6bd33023e3562b54fadca48f3fbb2c3c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":13,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T17:56:36.664040Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-20T12:48:17.579268Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-12T19:06:41.116051Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.11006","last_updated":"2025-03-06T07:50:21Z","snapshot_observed_at":"2026-08-17T06:02:00.538612Z","submitted_at":"2024-11-17T09:01:55Z","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T19:06:41.116051Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2411.11006"},"observation_digest":"sha256:9cbf93c3fe8b118dc3dc66c613cbb7f9ab31198074f1b15c8cc8451e372121ee","observation_id":"7eb47470-32bc-4928-b9c0-17e1e640325a","resolution":{"observed_at":"2026-08-12T19:06:41.116051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-12T11:48:09.522831Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.18648","last_updated":"2024-12-31T02:11:04Z","snapshot_observed_at":"2026-08-18T09:13:53.538381Z","submitted_at":"2024-11-26T22:50:53Z","title":"MADE: Graph Backdoor Defense with Masked Unlearning","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T11:48:09.522831Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2411.18648"},"observation_digest":"sha256:f5fad29e3f33dd8b3dee48b63f345046327bf2d48e865b03d9a58ba7c193c71e","observation_id":"1440e17b-67f1-4c5f-b6c5-9c2d135720e1","resolution":{"observed_at":"2026-08-12T11:48:09.522831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-09T18:17:40.173457Z","title":"arXiv preprint arXiv:2202.03423 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00646","last_updated":"2025-02-02T03:24:24Z","snapshot_observed_at":"2026-08-13T20:12:42.503834Z","submitted_at":"2025-02-02T03:24:24Z","title":"TrojanTime: Backdoor Attacks on Time Series Classification","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T18:17:40.173457Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2502.00646"},"observation_digest":"sha256:b5e15bc15d69527c1343d6d6500b641d4acc33018f6517017d3caa7dbf992bc1","observation_id":"e8bfaa53-cf4f-42dc-bb31-00f34842e085","resolution":{"observed_at":"2026-08-09T18:17:40.173457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-09T16:26:44.238141Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.01152","last_updated":"2025-02-03T08:42:46Z","snapshot_observed_at":"2026-08-14T07:19:18.459193Z","submitted_at":"2025-02-03T08:42:46Z","title":"Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T16:26:44.238141Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2502.01152"},"observation_digest":"sha256:1405faca111653200706715024a269e4019190ac2b8dd8bada5412e3976ca66f","observation_id":"c7c21856-6681-452a-b120-96b49e5ca761","resolution":{"observed_at":"2026-08-09T16:26:44.238141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-09T00:50:00.831718Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-13T00:35:04.918294Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":213,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.831718Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:663ed3addab5586b305b2bd13021cd62883fe07e09cb5d335f396928d1f8eabd","observation_id":"24a44a01-d81b-4d5d-b066-59114a119ed4","resolution":{"observed_at":"2026-08-09T00:50:00.831718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-07T13:05:25.251383Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22829","last_updated":"2026-06-18T15:45:13Z","snapshot_observed_at":"2026-08-13T03:40:47.296303Z","submitted_at":"2025-05-28T20:11:30Z","title":"Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:25.251383Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2505.22829"},"observation_digest":"sha256:c8754e6779bf9bb53f324934c3dc3c96cb2a3f0ec488e6b7e58c216c6be4fe40","observation_id":"82ae783b-3f5e-45df-82ff-30b2cd0757da","resolution":{"observed_at":"2026-08-07T13:05:25.251383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-06T17:33:49.387199Z","title":"Backdoor defense via decoupling the training process","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-15T17:40:15.880286Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.387199Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:6d4bd3c3b1a506e636daf0643ad16f33ff2bfd98ba3a0c86b758d6bde9f928a4","observation_id":"97c2c446-8782-4311-9505-6091ab84845d","resolution":{"observed_at":"2026-08-06T17:33:49.387199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-15T17:56:36.664040Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.19905","last_updated":"2025-07-26T10:30:27Z","snapshot_observed_at":"2026-08-20T20:07:59.732798Z","submitted_at":"2025-07-26T10:30:27Z","title":"ConSeg: Contextual Backdoor Attack Against Semantic Segmentation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T17:56:36.664040Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2507.19905"},"observation_digest":"sha256:5a37d9d1adeec98c06d4309612e84579bc84d1ed0fd3449e471242e729418fbb","observation_id":"71328786-c45e-4344-8434-6d717c1eae65","resolution":{"observed_at":"2026-08-15T17:56:36.664040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-06T11:19:26.346859Z","title":"Backdoor defense via decoupling the training process","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-09T12:14:14.615738Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.346859Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:63d011e6c10a119e15c61947db95407c038c7f7e81b377c452b3ab9c39065978","observation_id":"88a70275-33fb-401c-8a91-85fd2e42b227","resolution":{"observed_at":"2026-08-06T11:19:26.346859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-05T23:24:04.556438Z","title":"Huang, Y","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.05404","last_updated":"2025-08-07T13:56:54Z","snapshot_observed_at":"2026-08-17T23:26:40.497902Z","submitted_at":"2025-08-07T13:56:54Z","title":"NT-ML: Backdoor Defense via Non-target Label Training and Mutual Learning","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-05T23:24:04.556438Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2508.05404"},"observation_digest":"sha256:72467d12a87fde6319a0ac34d943bed2075e75cef9879346a95544e749230413","observation_id":"4f5f66b0-c20e-4b9c-b006-fd0ad3b54363","resolution":{"observed_at":"2026-08-05T23:24:04.556438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-04T22:06:30.445063Z","title":"Hou, R.; Huang, T.; Yan, H.; Ke, L.; and Tang, W","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":4139,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.445063Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:ced7ec0a57231c85c4f2d0ed6644b17042fc746004710ec47a212f77b611ebc5","observation_id":"97a4fd20-8b7b-4764-9585-f76648535994","resolution":{"observed_at":"2026-08-04T22:06:30.445063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":"2202.03423","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor defense via decoupling the training process","venue":null,"work_id":"65f101a8-3470-44d9-a1cb-9645323c31d4","year":2022},"citing_paper":{"arxiv_id":"2605.18907","last_updated":"2026-05-17T16:02:40Z","snapshot_observed_at":"2026-08-15T10:13:59.562346Z","submitted_at":"2026-05-17T16:02:40Z","title":"Lightweight and Fast Backdoor Model Detection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-20T12:44:07.137182Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2605.18907"},"observation_digest":"sha256:dd336ae13fdd989460f7d8b209c6e16d8560582cc7aff7fae58e5514e68de8e3","observation_id":"357e5375-4836-41d4-8bb8-9acb27347afb","resolution":{"observed_at":"2026-05-20T12:48:17.580850Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":"2202.03423","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor defense via decoupling the training process","venue":null,"work_id":"65f101a8-3470-44d9-a1cb-9645323c31d4","year":2022},"citing_paper":{"arxiv_id":"2605.18908","last_updated":"2026-05-17T16:05:55Z","snapshot_observed_at":"2026-08-15T01:05:18.975930Z","submitted_at":"2026-05-17T16:05:55Z","title":"Fast and Lightweight Backdoor Detection via Head Random Probing","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-20T12:39:19.973387Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2605.18908"},"observation_digest":"sha256:aade3d91dbcf29dae31aa71678115fed6eb450a4a24a6ad68f9da746189813ad","observation_id":"f305615c-1063-4ba2-97be-87214751e9da","resolution":{"observed_at":"2026-05-20T12:43:17.544724Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2202.03423/citation-record","integrity":"/paper/2202.03423/integrity","json":"/paper/2202.03423/citation-record.json","paper":"/paper/2202.03423"},"outbound":[],"paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T17:23:28.157097Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 13 inbound Pith citation observations for arXiv:2202.03423."}